Changes in mod_authz_host.xml http://src.iws.cs.ovgu.de/source/rss/httpd/docs/manual/mod/mod_authz_host.xml en Copyright 2005 Java Add <compatibility> notes for changes made in version 2.4.8 + synch formating with 2.4.x /httpd/docs/manual/mod/mod_authz_host.xml - 9a2b3982c53d51e2d2df29b6f94cc25e2ed134bc jailletc36 mod_authnz_host: Support the expression parser within the require directives. /httpd/docs/manual/mod/mod_authz_host.xml - b44b5b456752cb13fc552be3c43cbd1eb2556498 minfrin Adds a security remark regarding proxied content and the host address, and reference to mod_remoteip, as per comment added by Allard Hoeve to doc. /httpd/docs/manual/mod/mod_authz_host.xml - bf4254ed89d3967e2c230d89d887b3218c17ae0c rbowen Syntax for mod_a*.xml and MPMs /httpd/docs/manual/mod/mod_authz_host.xml - 6f10385908fbdfd4849e4bc50e690ee54c62f2cd humbedooh Cleanup effort in prep for GA push: Trim trailing whitespace... no func change /httpd/docs/manual/mod/mod_authz_host.xml - 860b4efe27e7c1c9a2bf5c872b29c90f76849b51 jim follow up r1042758 and r1043011 with more fixes to use proper example domains (and show some respect in our mangled version of prep.ai.mit.edu by using .edu instead of .com) /httpd/docs/manual/mod/mod_authz_host.xml - a330659fa32865eb8521adaccf5d9b75687b9aeb trawick Add 'local' authz provider that matches connections originating on the local host. PR 19938. Also remove some cruft from mod_authz_host (we don't need a per-dir config) /httpd/docs/manual/mod/mod_authz_host.xml - 1b390add6886fb1c0acdea82be0ef0920f1158ca sf Move all, env, and method authz providers from mod_authz_host to mod_authz_core /httpd/docs/manual/mod/mod_authz_host.xml - 05b30ac536cfc100ad693b417efc3da2bfae546c sf Fix typos /httpd/docs/manual/mod/mod_authz_host.xml - e40077ba3ba034e9541d0fd0ac41645a4a55ffcd sf Add method authz provider as potential Limit/LimitExcept replacement. /httpd/docs/manual/mod/mod_authz_host.xml - 5b2433f52bc66c1b06effbca93fe032a4bb881c8 sf Remove reference to the Match directive, which was removed in r726082 / r728126. PR: 46494 Submitted by: Bob Ionescu /httpd/docs/manual/mod/mod_authz_host.xml - 9787d30d80f5479abd59f608983e5ba5631bc94d sf Documentation revisions for r709838 and r709839. /httpd/docs/manual/mod/mod_authz_host.xml - ac1a656380fb9c5636a1f41b7e284f8eb2d60011 chrisd Correct 'require' capitalisation missed in previous commit /httpd/docs/manual/mod/mod_authz_host.xml - 9a954167579c73a24c6349aa8958eb4d0997bed0 noodl Pet peeve: fix capitalisation of 'Require' directive /httpd/docs/manual/mod/mod_authz_host.xml - 5140e49bf921295ad107d1a161d7e276eb3a209b noodl update license header text /httpd/docs/manual/mod/mod_authz_host.xml - db479b48bd4d75423ed4a45e15b75089d1a8ad72 fielding Update the copyright year in all .c, .h and .xml files /httpd/docs/manual/mod/mod_authz_host.xml - 3d81f57512275ca06a60a9bcbd23c1f8b429fdf2 colm Authz refactoring Merge from branches/authz-dev Basically here is a list of what has been done: - Convert all of the authz modules from hook based to provider based - Remove the ap_requires field from the core_dir_config structure - Remove the function ap_requires() since its functionality is no longer supported or necessary in the refactoring - Remove the calls to ap_some_auth_required() in the core request handling to allow the hooks to be called in all cases. - Add the new module mod_authz_core which will act as the authorization provider vector and contain common authz directives such as 'Require', 'Reject' and '<RequireAlias>' - Add the new module mod_authn_core which will contain common authentication directives such as 'AuthType', 'AuthName' and '<AuthnProviderAlias>' - Move the check for METHOD_MASK out of the authz providers and into the authz_core provider vector - Define the status codes that can be returned by the authz providers as AUTHZ_DENIED, AUTHZ_GRANTED and AUTHZ_GENERAL_ERROR - Remove the 'Satisfy' directive - Implement the '<RequireAll>', '<RequireOne>' block directives to handle the 'and' and 'or' logic for authorization. - Remove the 'AuthzXXXAuthoritative' directives from all of the authz providers - Implement the 'Reject' directive that will deny authorization if the argument is true - Fold the 'Reject' directive into the '<RequireAll>', '<RequireOne>' logic - Reimplement the host based authorization functionality provided by 'allow', 'deny' and 'order' as authz providers - Remove the 'allow', 'deny' and 'order' directives - Merge mod_authn_alias into mod_authn_core - Add '<RequireAlias>' functionality which is similar to '<AuthnProviderAlias>' but specific to authorization aliasing - Remove all of the references to the 'authzxxxAuthoritative' directives from the documentation - Remove the 'Satisfy' directive from the documentation - Remove 'Allow', 'Deny', 'Order' directives from the documentation - Document '<RequireAll>', '<RequireOne>', 'Reject' directives - Reimplement the APIs ap_auth_type(), ap_auth_name() as optional functions and move the actual implementation into mod_authn_core - Reimplement the API ap_some_auth_required() as an optional function and move the actual implementation into mod_authz_core Major Changes: - Added the directives <RequireAll>, <RequireOne>, <RequireAlias>, Reject - Expanded the functionality of the directive 'Require' to handle all authorization and access control - Added the new authz providers 'env', 'ip', 'host', 'all' to handle host-based access control - Removed the directives 'Allow', 'Deny', 'Order', 'Satisfy', 'AuthzXXXAuthoritative' - Removed the ap_require() API - Moved the directives 'AuthType', 'AuthName' out of mod_core and into mod_authn_core - Moved the directive 'Require' out of mod_core and into mod_authz_core - Merged mod_authn_alias into mod_authn_core - Renamed mod_authz_dbm authz providers from 'group' and 'file-group' to 'dbm-group' and 'dbm-file-group' Benefits: - All authorization and access control is now handle through two directives, 'Require' and 'Reject' - Authorization has been expanded to allow for complex 'AND/OR' control logic through the directives '<RequireAll>' and '<RequireOne>' - Configuration is now much simpler and consistent across the board - Other modules like mod_ssl and mod_proxy should be able to plug into and take advantage of the same provider based authorization mechanism by implementing their own providers Issues: - Backwards compatibility between 2.2 and 2.3 configurations will be broken in the area of authorization and access control due to the fact that the directives 'allow', 'deny', 'order' and 'satisfy' have been removed. When moving from 2.2 to 2.3 these directives will have to be changed to 'Require all granted', 'Require all denied' or some variation of the authz host-based providers. - Existing third party authorization modules will have to adapt to the new structure. /httpd/docs/manual/mod/mod_authz_host.xml - 367d146f245f3b1c9f77c18e6ec591b52e0b344c bnicholes fe80::/16 is for link-scope link-local addresses in IPv6, they are not for goign in Listen directives, VirtualHost blocks, or anything like that, and won't work. Perform a mass search and replace: 2001:db8 for fe80. 2001:db8 is the IPv6 documentation prefix. See RFC3849 for more details. /httpd/docs/manual/mod/mod_authz_host.xml - cf02129aebf73dd0bdf369b172eb481ff76ac5f6 colm Folks appear to be having trouble with multiple arguments to Allow. More examples is always a good thing. /httpd/docs/manual/mod/mod_authz_host.xml - 0dc7edffb1bef30c54cdba5b28a95b623362bfad rbowen Update copyright year to 2005 and standardize on current copyright owner line. /httpd/docs/manual/mod/mod_authz_host.xml - 08cb74ca432a8c24e39f17dedce527e6a47b8001 jerenkrantz